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[57] ABSTRACT 

A reprogrammable subscriber terminal of a subscription 
television service which can have the control program 
code of its control processor modified by downloading 
new program code from the headend. The control pro- 
cessor stores a boot program in an internal read only 
memory. Upon start up and resets, the boot program 
determines whether the control program should be 
changed from a command sent from the headend. The 
command, termed a parameters transactions, includes 
the number of expected download program code trans- 
actions required to complete the control code modifica- 
tion, the memory space areas where the code is to be 
loaded, and the channel over which the download pro- 
gram code transactions are to be transmitted. The chan- 
nel is tuned and when the boot program receives all the 
download program code transactions accurately and 
stores them, the boot program will cause the control 
program to be restarted at a selected address of the new 
or modified control program code which has been 
downloaded. The boot program may download code to 
different configurations of subscriber terminals includ- 
ing those with Flash EPROM or extended memories 
from plug-in expansion modules. 

62 Claims, 14 Drawing Sheets 
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REPROGRAMMABLE SUBSCRIBER TERMINAL 

This is a continuation of application Ser. No. 
07/983,909, filed Dec. 2, 1992 now abandoned. 

The invention pertains generally to a subscriber ter- 
minal for CATV or other description television systems 
and is more particularly directed to a method and an 
apparatus for rep rogramming a subscriber terminal. 

The subscriber terminal, more commonly known as a 
set top terminal, is an integral component of subscrip- 
tion television systems. These subscription television 
systems can be cable television (CATV) systems, 
SMATV systems, multi-point, multi-distribution 
(MMDS) systems, or direct-to-home (DTH) systems. 
The terminals have conventionally provided the func- 
tions of tuning particular channels of the subscription 
television system which are outside the subscriber's 
television receiver capability. Further, they provide 20 
conditional access to the particular subscription service 
through authorization codes and in many services pro- 
vide tiering or authorization of particular channels of 
the service by descrambling. 

More recently, the subscriber terminal has become 25 
user friendly by providing an interactive, on-screen 
display and other user functions that allow the sub- 
scriber to manipulate the subscription service and his 
television receiver in additional ways. These features 
include such things as volume control, pay-per-view 30 
event confirmation, favorite channel listings, sleep 
timer features, parental control capability, messaging, 
program timers for recording VCR programs, and 
other consumer friendly operational features. 35 

In addition, some of the features found in newer tele- 
vision receivers can be provided for older receivers by 
the subscription terminal. For example, channel identi- 
fiers, mute and volume control can be accomplished by 
the subscriber terminal making the subscriber's televi- 40 
sion receiver appear to be a newer model with these 
capabilities. 

An advantageous example of a subscriber terminal 
with these advanced consumer features is the 8600 
model series of subscriber terminals manufactured by 45 
Scientific-Atlanta, Inc. of Norcross, Ga. 

Currently, these subscriber terminals are controlled 
by programmable microcontrollers which have their 
control programs stored in a read only memory (either 
integral with the microprocessor or included in a sepa- 50 
rate integrated circuit) or stored in a separate non- 
volatile memory such as an EPROM or a battery 
backed up RAM. With the current prograrnming meth- 
ods, the control program of the subscriber terminal can 55 
only be changed by removing the memory device (or 
the device incorporating the memory) and replacing it 
This method is very inconvenient and expensive for 
changes which are to be made to subscriber terminals as 
it means a home visit from the service personnel of the gQ 
subscription service provider. Subscription television 
systems may have several hundred thousand subscriber 
terminals which may need such upgrades. 

Therefore, it would be advantageous to be able to 
reprogram the subscriber terminals of a subscription 65 
television service to change on screen parameters, 
change subscriber interfaces, add new features, and 
modify the control program from a remote location. 



SUMMARY OF INVENTION 

The invention provides a method and an apparatus 
for allowing a subscriber terminal of a subscription 
television system to be reprogrammed. 

The preferred implementation of the subscriber ter- 
minal includes a control microprocessor which includes 
at least a read only memory (ROM) and random access 
memory (RAM) which is internal to the microproces- 
sor chip. The memory capability of the microprocessor 
additionally includes several pages of Flash EPROM 
memory in 64k blocks which can be mounted internally 
to the subscriber terminal or externally in the form of 
plug-in modules. The memory space may include other 
types of memory which can be reprogrammed. 

The subscriber terminal further has a multifunction 
control circuit (MCQ which controls the input of data 
to the subscriber terminal from the headend of the sub- 
scription television system. The MCC controls a plural- 
ity of decoders for in-band video data, in-band audio 
data, and out-of-band data which it buffers in a volatile 
memory area. The data which the subscriber terminal 
receives occurs in defined transactions between the 
headend and the subscriber terminal. Among the multi- 
plicity of transactions between the headend and sub- 
scriber terminal are several to download program code 
parameters and another to download program code 
from the headend into the memory space of the control 
microprocessor. This capability provides a means to 
change the control program of the control microproces- 
sor to either upgrade it, add additional features, disable 
obsolete features, or to correct the performance of cer- 
tain routines of the control program. 

In the preferred embodiment, the ROM of the control 
microprocessor is but a small part of the overall mem- 
ory space of the processor and contains a loader pro- 
gram and, optionally, several kernel routines. This sys- 
tem code, collectively termed the boot program, is the 
only part of the memory space which is static and can- 
not be reprogrammed. In an alternative embodiment, 
the boot program further contains a revision number so 
that the control microprocessor may be upgraded by 
replacement and matched with reprogrammed control 
program code if so desired. The subscriber terminal is 
adapted to receive a download program code parame- 
ters transaction from the headend which describes the 
new control code which is to be downloaded into the 
memory space of the subscriber terminal. The boot 
program then utilizes these parameters to receive a 
plurality of download program code transactions which 
contain the program code to be stored. 

In the illustrated implementation, the download pro- 
gram code parameters transaction indicates the ex- 
pected number of download program code transactions 
that are to be received by the subscriber terminal, the 
channel of the subscription system (in-band or out-of- 
band) where the information is to be found, and the 
memory space into which it should be stored. 

The boot program receives a plurality of the down- 
load program code transactions, possibly multiple 
times. Once a download program code transaction is 
accurately received, the progra m code will be stored in 
t he memory space reserved for it anri th*» fiO,"nt nf 
pected transactions rfcframentgri. When all the transac- 
tions for a particularreprogramming operation have 
been received, the expected transaction count will be 
zero and thereby indicate that the downloading opera- 
tion is complete. In this manner, the downloading oper- 
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ation may be accomplished efficiently even if one or described if the following detailed description is read in 
several transactions are not received the first time they conjunction with the appended drawings wherein: 
are transmitted. FIG. 1 is a system block diagram of a subscription 
In accordance with another aspect of the invention, television system of the CATV type which includes a 
the download parameters transactions can be individu- 5 multiplicity of subscriber terminals; 
ally addressed, group addressed or globally addressed FIG. 2 is a detailed block diagram of one of the sub- 
while the actual download program code transactions scriber terminals of the system illustrated in FIG. 1; 
are globally transmitted. This operation permits a small FIGS. 3A-3D are pictorial representations of several 
set of transactions, the program code parameters trans- download program code parameters transactions which 
actions, to direct the storage of a much larger set of J0 the system uses to request the downloading of new 
transactions, the program code transaction. This dra- program code to the subscriber terminal illustrated in 
matically decreases the time it takes to encode and de- FIG. 2; 

code addressed transactions in the system.. This pro- FIG. 4 is a pictorial representation of the download 
vides for further efficiencies in reprogramming only program code transaction which the system uses to 
certain subscriber terminals or groups of subscriber 15 download program code which will supplement or 
terminals. replace program code in the memory space of the sub- 
Moreover, the program code parameters transactions scriber terminal illustrated in FIG. 2; 
may contain a prog ram code revision identifier in ord er FIG. 5 is a detailed electrical schematic diagram of 
fr> r pmYifl g ^ fh ^ r yOfrrfljYfi c riteria on which to det er- the memory architecture of the subscriber terminal 
mine which subscriberJejntriinals are reprogramme d. In illustrated in FIG. 2; - — 
thisnttlanner, a current program code version may be FIG. 6 is a detailed memory map of the memory 
periodically transmitted from the headend to update all space created by the architecture illustrated in FIG. 5; 
terminals for system revisions and to initially program FIG. 7 is a pictorial representation of the separation 
new terminals as they are added to the subscriber base. 25 of internal and external memory for the subscriber ter- 
The system operator is then assured that the entire sub- minal illustrated in FIG. 2; 

scriber base is operating with the same program and FIGS. 8A and 8B are a detailed flow chart of the boot 

that revising a terminal's software and initially loading program stored in the internal ROM of the control 

the software do not have to be accomplished by differ- microprocessor of the subscriber terminal illustrated in 

ent methods. 3Q FIG. 2; 

According to another aspect of the invention, the FIG. 9 is a detailed flow chart of the program code 

program code parameters transactions define the mem- which stores the download program code parameters 

ory space destination to which the new program code is transactions for the subscriber terminal illustrated in 

to be downloaded. Conveniently, the memory space FIG. 2; 

may be divided into contiguous areas such as a 64k 35 FIG. 10 is a detailed flow chart of the program code 

bytes, which physically may be separate integrated which the control microprocessor executes in the off 

circuits. This permits selected memory chips to be mode of the subscriber terminal illustrated in FIG. 2; 

downloaded rather than the entire memory space. This FIG. 11 A is a perspective front view of the expansion 

aspect is advantageous when particular types of mem- card 138 illustrated in FIG. 2 with its protective door 

ory chips are used such as Flash EPROM memory ^ closed; 

which must be entirely erased before being rewritten. FIG. MB is a perspective front view of the expansion 

With this method, only those memory chips which need card 138 illustrated in FIG. 2, with its protective door 

to be changed are erased. open; 

The memory space definition may also include a FIG. 12 is a perspective pictorial of the subscriber 

designation concerning whether the program code 45 terminal 40 receiving an expansion card 138 in accor- 

which is to be downloaded is to be stored in an internal dance with the invention; and 

memory, an external memory, or both. The preferred FIGS. 12A-12C are fragmented side perspective 

subscriber terminal has an expandable memory space views of the subscriber terminal illustrated in FIG. 12 

which can be augmented with plug-in modules. By with a snap on cover protecting the expansion slot of 

being able to direct the downloaded code to either the 50 the terminal, with the slot open, and the expansion card 

internal or external memory, a choice can be made of inserted in the slot; 

where to store certain basic control routines as opposed FIGS. 13A and 13B are fragmentary side views, 

to supplemental features. For example, a core of control shown partially cross-sectioned, of the expansion card 

routines which provide a basic features set of the sub- partially inserted and fully inserted in the carrier of the 

scriber terminal can be stored internally. Other features 55 subscriber terminal shown in FIG. 12. 

which are special, or are individually or group directed, ™^ * „ ^„ 

can be stored externally. This produces an advanta- ^^^^SS^^^ 

geous subscription television system where all the sub- PREFERRED EMBODIMENT 

scriber terminals have a certain common capability A subscription television system of the CATV type is 

based on a common control program loaded into the 60 more fully illustrated in FIG. 1. The subscription televi- 

internal memory space. If the subscriber or subscriber sion system includes a headend 10 and a plurality of 

group does not desire or need any of a special or addi- subscriber terminals 40, 44 and 48 which are connected 

tional features set, the plug-in modules need not be over a distribution system 52. As is conventional, the 

present and their cost saved. distribution system 52 may include coaxial or optical 

HRTFF nF^miPTTOM OF tkf np AWTNOS 65 fibeT cable> system am P lifiers > line extenders, etc. The 

BRIEF DESCRIPTION OF THE DRAWINGS headend 10 is under the supervision of a system man- 

These and other objects, features and aspects of the ager 12 which controls a hardware controller, headend 

invention will be more clearly understood and better controller 22. A billing computer 11 communicates 
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with the system manager 12 to authorize and transmit digital biphase shift keying (BPSK) modulated and ap- 
transactions to subscribers. plied to a frequency below 50 MHz. The signals flow 

The television or other programming for the sub- back from the subscriber terminals to an IPPV proces- 
scription system may come from a satellite downlink sor where they are decoded. In addition, any of the 
where it is decoded and demodulated by satellite receiv- 5 subscriber terminals 40, 44 and 48 may include a modem 
ers 18 into a number of channels. Each channel is either and telephone link 56 to a telephone processor 16 at the 
applied to a modulator 24 and 30 or a scrambler and headend 10. The information from processors 14 and 16 
modulator 26 and 28 which, under the control of the are directed to the system manager 12, which communi- 
headend controller 22, remodulates the channels to the cates to the billing computer 11 to obtain authorization 
frequencies of the local subscription system channel line 10 and billing information. The reverse signaling system 
up. For a premium or restricted channel service (tiered, has generally been used for ordering pay-per-view 
pay-per-view, or the like), some channels are scrambled (PPV) or impulse-pay-per-view (IPPV) events. In the 
by any of the known CATV methods by the scramblers future the reverse signal path may be used for any num- 
and modulators 26 and 28, while the other channels can ber of additional interactive services, 
be transmitted without conversion. The program chan- 15 Referring to FIG. 2, a detailed block diagram of one 
nels are then frequency division multiplexed onto the of the subscriber terminals, for example, the one indi- 
distribution system 52 by an RF combiner 34 as a broad- cated as 40 of the subscription television system will 
band television signal. The plurality of channels of pro- now be described. The broadband television signal from 
gramming can then be transmitted over the distribution signal distribution system 52 is received at the input of 
system 52 and supplied to each of the subscriber terrni- 20 up/down converter or tuner 100. An out-of-band data 
nals 40, 44, and 48. receiver 150 is also coupled to the broadband input. 

The scramblers and modulators 26 and 28 further Conventionally, the up/down converter 100 may in- 
may include the function of data insertion for its partic- elude an input filter, such as a diplexer, to separate the 
ular channel. This method of providing the data within 108.2 MHz out-of-band signal and the broadband televi- 
the channel signal is generally termed in-band signaling. 25 sion signal. The up/dow converter 100 can be tuned to 
The data may be applied to any audio portion, video a predetermined channel for receiving in-band video 
portion or both audio and video portions in combina- and audio data when not in use. The channel may be 
tion, or any other portion of the television channel. predetermined from the system manager 12 and, by one 
Many subscription television systems have amplitude of the data transmission methods described herein, the 
modulated data pulses on the audio subcarrier. Further, 30 predetermined channel identification can be stored in 
in other subscription television systems, data may be subscriber terminal 40. 

inserted into the vertical and/or horizontal blanking When in use, the up/down converter 100 is tuned 
intervals of the video portion. according to a channel entered by a subscriber via a 

The data which is inserted into the television channel user interface having an IR receiver 124, remote control 
in this manner can be conditional access data to globally 35 126 and terminal keypad 122. Up/down converter 100 
or locally address and control the subscriber terminals uses a phase locked loop under the control of a tuning 
40, 44 and 48, on screen text data, or other types of control 102 to convert the selected or predetermined 
information from the headend controller 22. Other data default RF channel signal to a 45.75 MHz intermediate 
and information, such as electronic program guides and frequency signal. A multifunction control circuit 
information services, can be inserted into the channels 40 (MCC) 104, preferably an application specific inte- 
from a data controller 20. The data controller 20 can grated circuit (ASIC) combining many subscriber ter- 
receivc local data or national data from the satellite minal control and data handling functions into a single 
downlink through the satellite receiver 18. package, is linked to up/down converter 100 by a bidi- 

In addition, data can be transmitted over the distribu- rectional link to the tuner control 102. The link has one 
tion system 52 by out-of-band signaling. In this mode, 45 path for tuning and a return link for feedback control of 
the system manager 12 accesses an addressable transmit- the tuning process. A feedback signal for automatic gain 
ter 32 with transactions to transmit this data. The ad- control and one for automatic frequency control are 
dressable transmitter 32 may be used to modulate a data transmitted to the up/down converter 100 through 
signal on a frequency not associated with the television filters 101, 103, respectively from a video demodulator 
programming The broadband television programming 50 109. 

of the cable systems has generally been applied from 50 A filter, such as a SAW filter 106, filters the IF chan- 
MHz to 550 MHz and above, while out-of-band signal- nel signal to split the signal into separate video and 
ing systems have been used in non-video portions of audio portions for further processing. The video por- 
these signals, such as at 108.2 MHz with a frequency tion is demodulated and descrambled by the video de- 
shift keying modulation technique. These transactions 55 modulator 109 under the control of a descrambler con- 
are combined with the broadband television signal at 36 trol 110 of the MCC 104. The video demodulator 109 
and transmitted to the subscriber terminals 40, 44 and performs the sync restoration (descrambling of the 
48. video signal) for sync suppression scrambling. The 

Transactions in the system are designated as ad- video signal then passes through a band pass filter 130 
dressed (to a particular subscriber terminal or group of 60 and to a video inverter 132 where inverse video inver- 
subscriber terminals) and global (to all subscriber termi- sion (descrambling) takes place. The descrambling of 
nals). These transactions are in a standardized format the video portion, whether sync suppression, sync in- 
which can be sent over any of the communication paths version, video line inversion, etc. is under the control of 
mentioned. the descrambler control 110 of the MCC 104. The de- 

Signaling and data information may also flow in the 65 scrambler control 110 provides the necessary timing 
reverse direction from the subscriber terminals to the signals, inversion axis levels, and whether the video is 
headend via a reverse signaling path through the distri- inverted or not to the video inverter 132 and supplies 
bution system 52. In one form, the reverse signals are the necessary timing, restoration levels and identifica- 
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lion of sync pulses to be restored to the demodulator When the keypad 122 or IR remote control 126 is 

109. The descrambler control 110 usually receives such utilized to select a command, the microprocessor 128 

descrambling information from pulses as in-band audio operates to execute the command. For example, this 

data. operation may be to instruct the tuner control 102 to 

In the other path, the audio signal is converted from 5 appropriately control up/down converter 100 to tune a 

the 41.25 MHz IF carrier to the intermodulation fre- selected channel. The subscriber terminal interacts with 

quency of 4.5 Hz by a synchronous detector 105. Feed- the subscriber by providing numerous on screen dis- 

back for automatic gain control of detector 105 is sup- plays which assist in the operation of the terminal. The 

plied from the output of band pass filter 131. The audio on screen displays provide information and prompts to 

signal may then be demodulated by an FM demodulator 10 guide the subscriber through many of the complex fea- 

119. An amplitude modulation detector 111 performs tures of the terminal. 

pulse detection to recover the in-band audio data which The descrambler control 110 of the MCC 104 utilizes 
are amplitude modulated onto the audio carrier. The recovered descrambling data to generate appropriate 
recovered m-band pulses are supplied to an in-band contro1 signals, for example, inversion control and 
audiodatadecoderll7ofMCC104forprocessingafter 15 equalizing, sync restoration or regeneration for de- 
being shaped by pulse shaper 115. The in-band data, scrambling, or otherwise restoring the input baseband 
except for descrambling data, is stored in DRAM 137 television signal A secure microprocessor 136deto> 
for buffering. Descrambler control 104 accesses de- mines whether the descrambler control 110 of MCC 104 
scrambling data directly for the video descrambling A carnes , out descrambling on a particular channel or 
operation. Volume control of the audio signal is per- 20 what form of descrambling is, required at a particular 
fonned under the control of a volume control 118 of the l ! me * ^rpreting the authorization and control data 
MCC 104 and the microprocessor 128 as described in downloaded from the system manager 12 ^y any of the 
Tion.To mc^mi ■ , ■ « • , f three data transmission schemes discussed herein, out- 
U.S.Pat. No. 5,054,071, incorporated herein by refer- ru j - u j ^ • U J \ • . *v ■ ♦ 

A - . ' . * . . . , of-band, m-band audio or m-band video) into the mter- 

ence. After volume control, the audio signal is passed txn .' , . 7 , ... 

, , - tA „ ' . A & . * *S -r^ 25 nal NVM memory of the device. The non-volatile mem- 

through a low pass filter 123 £id a mute switch 125 The (nvm) m 4 microproce ssor 136 stores 

output of the mute swrtch 125 is applied to a modulator ^ fQT example> authoriz £ ion data> scramb i ed 

~L ^ • , . , ~ , channel data, scrambling mode data, some terminal 

The MCC 104 receives the v:deo signal after demod- configuration data ^ other required dat2L 
ulation and descrambhng and strips die in-band video 3Q The microprocessor m operates by 
datafrom the VBIof thesignal witha VBI decoder 129. a contro] ^ which p re ferably is partially stored 
The m-band video data is transmitted at a frequency on in a readK)nly memory internal to me piocessoT ^ 
the order of known teletext systems, such as about 4.0 partially stored in a non-volatile memory such as Fl ash 
megabits per second, and a data clock provides an ap- EPROM mem ory 134. In addition, the control program 
propriate sampling frequency higher than the Nyquist 35 6f the control microprocessor 128 may also reside in the 
rate according to well known techniques. The m-band non-volatile memory of an expansion card 138. The 
decoder 129 stores the data in- DRAM 137 prior to microprocessor 128 communicates with the non- 
processing by the microprocessor 128, the DRAM 128 volatile memory 134 and 138 via a memory bus 141 
serving as a data buffer. which nas data> ad dress, and control lines. In addition, 

The output of video inversion circuit 132 is also sup- 40 ^ microprocessor 128 controls the data decoders 117, 

plied to an on screen display control 127 of the MCC ^9 14$ ^d the tuner control 102, volume control 

104. The on screen display control 127 selectively gen- 118> on screen display control 127, descrambler control 

exates on screen character and graphic displays in place 110 and input key scanner and control 148 via com- 

of or overlaid on the video signal. The modulator 142 mands through MCC 104 and control microprocessor 

combines the video signal from the output of the on 45 bus (CMB) 131. The microprocessor 128 also directly 

screen display control 127 and the audio signal from the controls the mute switch 125 and the output frequency 

output of the mute circuit 125 and converts the com- selection of the modulator 142. The microprocessor 128 

bined signal to the channel frequency selected by the includes additional capacity for other auxiliary device 

microprocessor 128, such as channel 3 for NTSC. The communications and contro) through a data port 140. 

combined and remodulated signal is supplied as an RF 50 The memory control 112 permits data coming from 

output to a television receiver in well known manner. the three data decoders 117, 129 and 146 to be placed in 

A control microprocessor 128 controls the overall a volatile memory such as DRAM 137. There it can be 
operation of the subscriber terminal 40. The subscriber accessed by the control microprocessor 128 via the 
communicates to and controls the microprocessor 128 CMB 131. The MCC 104 also distributes control in- 
through an interactive user interface with an on screen 55 structions from the control microprocessor 128 to the 
display- The user interface includes a keyboard 122 on other parts of the MCC 104 to provide operation of the 
the front panel of the subscriber terminal 40 and the rest of the subscriber terminal 40. The MCC 104 addi- 
remote 126 which generate subscriber control signals tionally connects to a secure microprocessor bus (SMB) 
for channel tuning, volume level control, feature selec- 143 which permits communications between the secure 
tion, and the like. These subscriber control commands 60 microprocessor 136 and other portions of the subscriber 
are decoded by an input scanner and control 148 of terminal 40. The SMB 143 is further coupled to the 
MCC 104. The remote IR receiver 124 of the user inter- expansion card 138 to provide renewable security, 
face receives the commands from the infrared (IR) or The memory control 112 and microprocessor inter- 
other remote control 126, as is well known in the art, faces of the MCC 104 are the central communications 
and provides commands to the microprocessor 128. The 65 facility for the control microprocessor 128 and the se- 
user interface additionally includes a 4 digit, 7 segment cure microprocessor 136. The memory control 112 
LED display 120 which displays the tuned channel receives requests to write to memory or read from 
numbers and diagnostics. memory from the microprocessors 128, 136 and the 
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other controls and data decoders. It resolves conten- tile memory size, in this case the size of the DRAM 137. 
tions for memory transfers, giving priority to real time Byte 19 is an indication of whether the system is corn- 
applications and the microprocessors, and schedules the manding an immediate software download or whether 
data flow. The microprocessors 128 and 136 communi- the downloading should occur sometime in the future, 
cate through internal registers of the MCC 104- with the 5 The addressed download parameters transaction 
memory control 112 and other portions of the MCC. (FIG. 3B) for the internal memory (IAPT) is identical 

The expansion card 138 is a printed circuit card in the header section (bytes 0-4) to the addressed trans- 
which contains memory and/or secure microprocessor action for external memory (FIG. 3A). The structure is 
components, which can be plugged into a connector also similar in that there are indications in bytes 7-12 for 
200. The connector 200 electrically extends the control 10 the internal starting bank and internal ending bank, 
microprocessor memory bus 141 and the secure micro- along with their first address and last address. Addition- 
processor bus 143 to the expansion card 138. Additional th e program code revision for the internal memory 
program or data memory, or renewed security can be ls stored in byte 13 of the transaction and the expected 
provided by the expansion card 138. number of downloaded program code transactions is 

The subscriber terminal may optionally include an 15 prov jd e d in bytes 14 and 15. The footer (bytes 16-21) 

impulse pay-per-view (IPPV) module of either the tele- ^ ^ ^ to the mterna i transactions, 

phone type 152 or the RF-IPPV type 154. The IPPV rhe download parameters transaction versions 

module allows the subscribers to request authorization ^ lGS ^ 3D) of ^ addressed transaction versions 

of their subscriber terminal 40 to receive pay-per-view Wa Qnly b havin a 2£ro in bit t of byte x> no ad _ 

events, store the data associated with the purchase of 20 ^ ^ different transaction-identifiers. The parame- 

the event in the non-volatile memory of the secure tm definitions> bytes ^ contain the same data in the 

microprocessor 136, and then transmit the data to the same format for both Messed and global transactions, 

system manager 12 via the telephone return path or the Xhe download program code taction * more 

RFretum path via the si^al distnbutzon system 52 f^y Oiustmted m 4. The first bit in Byte U is a zero 

The memory space of the subscriber terminal can be 25 mdicatin that ^ download program C< J C transaction 
downloaded wiA new program code through a senes of s transaction. The traSon could be ad- 
transactions including a download parameters transac- , &t" " ' , . r j j ~f* 
tion and a download program code transaction. The *°»* but sending large amounte of addressed transac- 
download parameters transaction for the subscriber *» ^ the system assets. Byte 2 of the transaction 
terminal illustrated in FIG. 2 is more fully shown in 30 mdlcate f *? c ^ revi f? n n ? nibcr - . B * e ^ indicates the 
FIGS. 3A-3D. The download parameters transaction is destination bank (page) for the particular memory con- 
22 bytes in length and has four versions. A first version figuration and the most significant nibble in byte 3 and 
(FIG. 3 A) is for external memory configurations and a ■? of ^ * m usec * for ^f 5 blts f" 15 °/ «■» bank " 
second version (FIG. 3B) is for internal memory config- Because ^ «» * 6 Wf» °/ m P™&™ 
urations. Either of these transactions may be addressed 35 code transaction, the destination address points to the 
(FIGS. 3A, 3B) or global (FIGS. 3C, 3D) to provide first address of a 16 bvte segment. The first byte is 
versions three and four loaded at this address in the destination bank and the 

The addressed version of the download parameters following bytes loaded sequentially in the same se- 
transaction for external memory configurations wul <fPSDC& that they are stored in the transaction. In this 
now be more fully described with respect to FIG. 3A. 40 manner 16 banks of 64k memory can be reloaded by a 
Bit 1 of byte 0 of the transaction indicates that it is an verv simple transaction. Bytes 5 has a nibble which 
addressed transaction, and bytes 1-3 provide 24 bits of indicates that the transaction is directed to the control 
addressing capability. Additionally, byte 4 has a least microprocessor 128 and the second nibble of the byte 
significant nibble which adds 4 more bits of addressing indicates the kernel revision for the transaction. Byte 6 
capability. Thus, the transaction may address 2 2 8 sub- 45 indicates the transaction is a download program code 
scriber terminals in the customer base of the subscrip- transaction. Bytes 6-21 are the actual program code 
tion system. The most significant nibble in byte 4 in- bytes which are downloaded to the control micro- 
eludes a code 0100 which indicates the transaction is processor memory space. Each transaction loads 16 
directed to the secure microprocessor 136. Byte 5 is bytes of code into the memory space of the subscriber 
reserved for a transaction identifier code which indi- 50 terminal 40. 

cates it is an external, addressed, parameters transaction In tra s manner a large amount of program code (1 
(EAPT). megabyte) can be efficiently and accurately down- 
After this header information, bytes 6-19 provide loaded to the memory space of the subscriber te rminal 
parameter definition information concerning the down- 40- By having the download parameters transaction 
loading of program code to the memory space. The 55 either addressed or global, internal or external, the sys- 
least significant nibble in byte 6 includes a code that tern allows for an efficient addressing of the program 
identifies the kernel revision for the boot program in the code to either all terminals, a group of terminals or even 
microprocessor 128. Bytes 7 and 8 indicate the number a single terminal. By indicating which code revision is 
of the starting bank and number of the ending bank for acceptable to the terminal and indicating the code revi- 
the external memory. Bytes 9 and 10 are the first ad- 60 sion in the download transaction, the addressed termi- 
dress of the starting bank of external memory and bytes nals may even be further downloaded with different 
11 and 12 are the last address of the end bank of external revisions or the same revision for a different micro- 
memory. Byte 13 is the program code revision number processor. Also the inclusion of the kernel revision 
and bytes 14 and 15 are the expected number of down- provides for the update of the control microprocessor 
loadable transactions that it will take to load the code. 65 128 or a new model to allow compatible code conver- 
Bytes 16 and 17 indicate the frequency of the channel sion. Moreover, the distinction between internal and 
on which the downloadable program code transactions external memory can be used to direct program code as 
will be transmitted. Byte 18 is an indication of the vola- necessary. 
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Normally, the headend 10 will be constantly broad- 
casting a standard software program that all subscriber 
terminals should be using. This program code advanta- 
geously can be addressed to all terminals by a global 
download parameters transaction which may indicate it 
is for internal or external memory. New terminals as 
they enter the subscriber base are automatically down- 
loaded with the correct software by these transactions. 
Code revisions to the entire subscriber base can be made 
by a global download parameters transaction with a 
new revision number stored therein. The system sup- 
ports different kernel revisions so that different models 
of subscriber terminals may be used in the same system. 
The addressed parameters transactions may then be 
used to reach smaller groups, or even single terminals, 
with special software. It is envisioned that the headend 
will broadcast several versions of software simulta- 
neously and the download parameters transactions will 
be used to allow the subscriber terminals to select the 
one for its particular purpose. 

The memory space and memory control of the sub- 
scriber terminal 40 will now be more fully described 
with reference to the schematic in FIG. 5. The memory 
space of the control microprocessor 128 is shown as 1 
megabyte in length. The control microprocessor 128 25 
uses address lines A0-A19 to be able to reach this size of 
memory in blocks or pages of 64k bytes. Addresses 
A0-A15 are addresses found on a particular 64k page 
which are then designated by the extended addresses 
A16-A19 from MCC 104. 

The physical memory of the memory space can be 
either internal or external. Internal memory for this 
implementation means fixed and not removable. The 
external memory for this implementation indicates 
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and the read/write memory line R/W of the micro- 
processor 128. The MCC 104 further provides a master 
clock signal CLK1 to the XTAL input of the micro- 
processor 128 to run the device. The MCC 104 provides 
a data ready signal INT which is coupled to the inter- 
rupt input of microprocessor 128 to indicate that trans- 
action data has been received and is stored in DRAM 
137. 

The DRAM 137 is controlled by the memory con- 
troller 112 of MCC 104 via address lines A0-A9, row 
address strobe *RAS, column address strobe *CAS, and 
a write enable signal *WE. Data in 4 bit half bytes is 
read from and written to the data terminals D1-D4 of 
the memory device by the memory controller 112. The 
output enable input *OE and ground input to the 
DRAM 137 are grounded. The secure microprocessor 
136 communicates over the secure microprocessor bus 
(SMB) with the MCC 104. The SMB comprises 4 input- 
/output data lines SD0-SD3 and a serial clock line 
SCLK to time the communications. The memory con- 
troller 112 additionally provides a master clock CLIC2 
to run the secure microprocessor 136. 

Extensions of the control microprocessor memory 
bus 141 are provided by the memory extension connec- 
tor 200. This extension connector is a 34 pin, edge con- 
nector which can be connected to other printed circuit 
boards within the subscriber terminal cover (on board) 
or provided to plug-in devices external to the subscriber 
terminal such as the expansion card 138. The expansion 
connector includes the address and data bus of the mi- 
croprocessor 128, lines AD0-AD7 and lines A8-A15. 
Further, the extended address lines A16-A19 are pro- 
vided to the extension connector 200 from the MCC 
104. In addition, the expansion connector 200 is electri- 



memory space which can be expanded by adding one or 35 cally coupled to the SMB 143, which provides the serial 



more modules of removable memory. In the preferred 
embodiment, this is accomplished by an expansion con- 
nector 200 which accepts an external plug-in module. 
The expansion can take the form of an expansion card 



clock SCLK and input/output data lines SD0-SD3 to 
devices coupled to the connector. Still further, control 
lines from the microprocessor 128 including the enable 
output line E, the read/write line R/W, and the address 



connector or individual plug in connectors which will 40 strobe line AS are coupled to the connector 200. The 



receive printed circuit boards mounting the modules on 
board. 

The control microprocessor 128 generates the page 
addresses A0-A15 from 2 bidirectional 8 bit I/O ports 
PB and PC. The microprocessor 128 time multiplexes 45 
the port C lines to be both address and data lines AD- 
0-AJD7 and applies them to a data latch 202 which 
maintains the address word while it reads data from the 
same lines. The address lines are applied to the address 
inputs A0-A15 of the internal memory 134, in FIG. 5 a 
256k Flash EPROM (pages 0-3). Data from the mem- 
ory 134 is output from its data outputs D0-D7 on the 
port C data lines AD0-AD7. The extended address 
lines A16 and A17 needed by the memory to address the 
64k pages of memory are provided by the MCC 104 to 
determine page assignment. Additionally, the MCC 104 
provides the control signals to the chip enable input 
*CE, output enable input *OE, and write enable input 
*WE to the memory device 134. 



microprocessor 128 reads an input port line PAO to tell 
whether the expansion card 138 is inserted in the con- 
nector. The input port line is connected to a pin of 
connector 200 which can be grounded when the expan- 
sion card 138 is inserted. The expansion connector 200 
is supplied with H-12 V, +5 V power connectors and 
ground for the circuit components on the expansion 
card 138. In this manner, those devices which are in- 
serted in one or more connectors coupled to the exten- 
50 sion connector 200 appear to be electrically present in 
the memory space of the subscriber terminal 40. 

Thus, the memory can be divided into internal and 
external memory as seen in FIG. 7 where, based on the 
feature set and the length of the control program, the 
internal memory 134 can be reduced to a minimum. 
Additional feature sets or special features for only cer- 
tain subscribers or groups of subscribers then may be 
provided by plug-in modules with the additional costs 
born by those subscribers benefitting and paying for the 



55 



The microprocessor 128 communicates with the 60 additional features. The connector 200 can support 



MCC 104 over a serial bus with a transmit line con- 
nected to the address in input ADIN and a receive line 
connected to the address input ADOUT. An address 
clock on line ACLK provides a clock signal to synchro- 
nize the transfer of data between the microprocessor 65 
128 and MCC 104. A chip select signal ACS is used to 
select the MCC 104 and to separate control data. The 
MCC 104 also has a connection to the enable output E, 



multiple modules or a single module such as expansion 
card 138. The expansion connector 200 also provides 
for renewable security by providing the secure micro- 
processor bus SMB 143 as a connection to the expansion 
space. Another secure microprocessor, such as that 
illustrated as 201, can be plugged into the connector 200 
as an on board module or mounted on the extension 
card 138. The system reset line R is connected to the 
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expansion connector 200 and the microprocessor 201. trol microprocessor 128 begins executing instructions at 
This secure microprocessor 201 may then take the place block A10. In that block, the microprocessor 128 initial- 
of (or supplement) the operation of the secure micro- izes all the input/output ports of the device so that it 
processor 136 in the system. can communicate with the remaining portions of the 

FIG. 6 illustrates the configuration of the memory 5 terminal. Next, in block A12 the MCC 104 is initialized 
space of the control microprocessor 128. The space is to allow further communications with and control of 
configured into 64k blocks or pages of memory of the other devices in the subscriber terminal 40. Addi- 
which there are 16 blocks, 0-15. Each memory block tionally, the microprocessor 128 in block A14 will cause 
addresses 0000-FFFF hexadecimal and generally is the MCC 104 to provide initialization for the on screen 
implemented by a single integrated circuit device, either 10 display through the on screen display control 127. The 
a ROM memory, a battery backed up RAM memory, a microprocessor 128 will then check to determine 
Flash EPROM memory, or EEPROM memory. This whether the secure microprocessor 136 is ready to corn- 
address separation makes it easier to control the process municate and receive instructions. If the secure micro- 
of executing the control program and enabling the de- processor 136 is not ready, the microprocessor 128 will 
vices. The total memory size in this application may be L5 loop back to the entry of block A16 until it receives an 
up to 1 megabyte and is configured in this manner for indication that the secure microprocessor has been ini- 
convenience. It is evident that additional memory or a ualized. 

different configurations can be made to the memory After this indication is received, the program will 
space without varying the invention. begin a series of tests for its physical memory configura- 

Each memory block has certain reserved spaces for 20 tion. In block A18 the programwill test to determine 
system operation including addresses 700O-7FFF hexa- whether there is an expansion card 138 present The test 
decimal (hex). This partition is used as internal memory is performed by testing the state of the logic signal on 
space to the control microprocessor 128 and contains a port pin PAO of the microprocessor 128 which is tied to 
boot program. Additionally, at address 7F7F hex, the connector 200. If the expansion card is present, then the 
code contains the reset address and the revision code 25 system parameters of the device are set to external val- 
number of the particular microprocessor and boot pro- ues to allow communication with and control of the 
gram. Addresses 0000-0040 hex are reserved for the circuitry on the expansion card 138. If it is determined 
hardware registers of the control microprocessor 128 the expansion card is not present, then in block A22 the 
and the memory space 0041-OOFF hex is reserved for system parameters are set to internal values. With this 
the internal random access memory of the control mi- 30 task accomplished, the microprocessor 128 will then 
coprocessor 128. These addresses are unusable in any select and enable the memory configuration which it 
of the other pages and refer only to the internal physical has determined is present in block A24. In block A26, it 
memory space of the control microprocessor 128. In is determined whether there is external ROM present by 
addition, the 16 memory spaces at the end of each page, checking the configuration parameters of the expansion 
FF00-FFFF hex, are used to store interrupt vectors 35 card 138. 

and the revision of the present program control code. If there is external ROM present, then the control 
Memory space from 0100-6FFF and 8000-FEFF hex is program will start at the external ROM start address in 
used to provide space for the control program of the block A28. The external ROM start address was a pa- 
microprocessor 128. This memory space may be down- rameter which was stored when the system determined 
loaded by the method described herein. Further, the 40 that external ROM was present. If, however, internal 
memory space of these pages may be internal (located memory is only ROM, then the system will start at the 
on a printed circuit board in the subscriber terminal 40), internal ROM start address in block A32. 
external (supplied on the expansion printed circuit card This permits a facile method of selecting system oper- 
138), or both. Any combination of types of memory ation. If external ROM is present, this indicates external 
may be used to advantage and the invention should not 45 programming and the subscriber terminal will begin 
be limited to a particular hardware configuration. Pref- executing code there to pass control to the subscriber 
erably, however, the subscriber terminal 40 has 1-16 terminal 40 to the external module. Different plug-in 
pages of Flash EPROM memory which can be down- modules can then provide entirely new features and 
loaded by the technique herein described. The imple- operations of subscriber terminal 40. Unplugging the 
mentation shown illustrates 4 pages of internal Flash 50 module will cause failure of the test in block A26 and 
EPROM memory with extra pages being mounted ex- reversion to the internal software. If there is only inter- 
ternally. The additional pages 4-15 can be located on nal ROM, this indicates there is no space to download 
board in plug-in modules or on the expansion card 138. program code, and the rest of the boot program should 

The control microprocessor 128 c ontains the boot not be used, 
program in its i nternal ROM which, upon start up o r 55 If neither external ROM nor internal ROM only is 
res et, will initialize the subscriber terminal 40 and tnit i- present, that means that the system should start from an 
ate the control progr am of the contr ol micro proc essor address in the downloadable section of the memory 
128 irom the correct starting address, 'lne ooct pro- space, in which the preferred implementation is Flash 
gram also provides a loading routine for the download- EPROM memory. Therefore, the negative branch from 
ing of new control code, either into the internal non- 60 block A30 will begin a checksum calculation of the 
volatile memory of the subscriber terminal 40, such as Flash EPROM memory, both internal and external in 
Flash EPROM memory 134, the external memory on block A 34. If this checksum calculation is successful 
the expansion card 138, or both. The boot program then in block A38 the system will start from a FLASH 
comprises an initialization and loading program and system start address. 

several kernel routines. 65 If, however, the checksum test is failed in block A36, 

The boot program will now be more fully explained the control microprocessor 128 will determine that 
by reference to its system level flow chart illustrated in program code should be downloaded. The micro- 
FIGS. 8A and SB. Upon initialization or reset, the con- processor 128 will begin to look for download program 
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code transactions with which to reload the Flash 
EPROM, or other non-volatile memory, of the memory 
space. This starts in block A 40 by initially coarse tuning 
the channel with downloadable program code informa- 
tion on it Additionally, a communication (L-l) is dis- 5 
played in the LEDs of the subscriber terminal 40 indi- 
cating that the terminal is downloading software. Fur- 
ther, a communication to the secure microprocessor is 
made in block A44 to notify it of the present status. 
Thereafter, in block A46 all flash memory is erased and 10 
tested in block A48 to determine whether the erasure 
was successful. If the erasure was not successful a loop 
is formed to try to erase the memory. 

A display of (E-l) in the LEDs indicates that the 
attempted erasure of the memory has not been success- 15 
ful. When the erasure is successful, the program will 
fine tune the frequency of the tuner 100 in block A52 to 
the channel on which the downloadable program code 
transactions are to occur. The terminal will then down- 
load program code transactions until it decrements the 20 
expected transactions count to zero. In block A56 when 
the transaction count becomes zero, the program will 
jump back to its starting point in block A10, initialize 
the hardware, and start the control program at the des- 
ignated start address of the new configuration and con- 25 
trol program. 

FIG. 9 is a detailed flow chart of the program code 
which is used to download the parameter transactions. 
This program code is executed by the control micro- 
processor 128 and may be located in the downloadable 30 
memory space of the system. The flow chart is exem- 
plary only and many other types of programs to control 
the downloading of software can be devised from the 
teachings of the invention. The control microprocessor 
128 enters this section of code in block A62 by recog- 35 
nizing an interrupt from the MCC 104 which indicates 
that it has data, and possibly a transaction, for the mi- 
croprocessor. The control microprocessor 128 loads the 
data, and recognizes it as a download parameters trans- 
action in block A64. The data in the transaction is tested 40 
to determine whether (in block A66) it has the correct 
kernel revision. If the kernel revisions do not match, 
then this parameters transaction for downloading the 
code is not for this microprocessor and the program 
exits. If the kernel revisions do match, the program path 45 
flows through to block A68 and a determination is made 
whether the program code revisions match. If the code 
revisions match, that means that the code revision that 
the parameters transaction is attempting to download is 
already in the memory space of the control micro- 50 
processor 128. Therefore, the program exits. 

If, on the other hand, the code revisions do not match 
then the control microprocessor 128 will save the pa- 
rameters from the transaction in the NVM of the secure 
microprocessor 136 and the DRAM 137. Next, the 55 
microprocessor 128 tests to determine whether or not 
the immediate flag is set in block A72. If the immediate 
flag is set, the system operator has determined that 
downloading of the code should take place at the same 
time that the parameters transaction is received. This 60 
will cause the subscriber terminal 40 to go into a down- 
loading mode no matter what else the subscriber termi- 
nal is doing. If the immediate flag is set the checksum in 
the Flash memory is written incorrectly and the pro- 
gram then jumps to the reset address in block A78. By 65 
writing the checksum in the Flash memory incorrectly 
the system causes the boot program to start its loading 
program. 
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The subscriber terminal 128 may, however, be en- 
gaged in an interactive session with the subscriber or 
may be doing something the subscriber does not wish to 
be interrupted, such as recording a premium event that 
he has paid for. Therefore, unless the subscriber termi- 
nal 128 needs to be downloaded immediately, it is more 
consumer friendly to allow the downloading to take 
place at the convenience of the subscriber. Thus, in 
block A72, if the immediate flag is not set, the program 
will flow to block A76 where a subscriber convenience 
flag is set before the program exits. 

The subscriber convenience flag is not checked until 
the subscriber terminal is in an off mode and then is 
tested with a block of program incorporated into the 
other off mode function routines. This block of code is 
more fully illustrated in FIG. 10. The program tests the 
consumer convenience flag in block A80 and if it is not 
set it processes the other off mode routines in block A82 
before exiting. If the convenience flag is set, then in 
block A84 a message will be displayed to the subscriber 
indicating that "New software is available'* and request- 
ing "is it OK to update the software (this will take about 
minutes during which programming will not be avail- 
able)?" Press UP for OK and DOWN for Not OK." 
The control microprocessor 128 will then wait for the 
subscriber key input in block A86, or after a timeout 
period, will accept the lack of a key input as an affirma- 
tive response and branch to either block A90 or block 
A94 depending upon the response. If the subscriber 
does not wish the subscriber terminal to be unavailable 
while the program code is being downloaded, then he 
will select no and then, the program will exit in A94. 
The convenience flag is thereafter tested periodically to 
determine whether or not the downloading can take 
place. If, however, the subscriber indicates that it is 
alright to download software, the procedure in block 
A90 writes an incorrect checksum in the Flash memory 
and resets in block A92. As discussed previously this 
will cause the downloading program of the boot pro- 
gram to activate and download the particular program 
code. 

In one preferred embodiment shown in FIGS. 11A 
and 11B, the external memory and the additional secu- 
rity feature may be provided by the expansion card 138 
which mounts additional memory modules and/or an 
additional secure microprocessor on a printed circuit 
card. 

The expansion card 138 comprises a printed circuit 
card 300 which has a casing 350 formed of a top housing 
352 and a bottom housing 354. Each housing 352, 354 is 
molded from plastic and can be snap fitted together 
over the PCB 300. The printed circuit board 300 may 
mount the memory components and secure micro- 
processor on one or both sides. The board 300 prefera- 
bly has a double row (top and bottom) of finger like 
edge connection terminals 366. The expansion card 138 
additionally has a protective door 364 which pivots 
about spring loaded hinges at 370. The protective door 
364 protects the bottom edge terminals of the board 300 
while allowing a low profile. The protective door 364, 
shown in its open position in FIG. 11B, pivots out of the 
way when the expansion card 138 is inserted into a slot 
304. The spring returns the door 364 to its protective 
position when the card is removed. The casing 350 
protects the circuit board 300 from the environment and 
is sturdy enough to prevent damage from most sub- 
scriber handling. The top housing 352 is provided with 
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inclined top surfaces which meet in a peak 348 and a 
trough 368 to channel liquids away from the circuitry. 

The expansion card 138 fits into connector 200 elec- 
trically coupled to the expansion connector 200. The 
configuration is more fully shown in FIG. 12 where a 5 
printed circuit card 300 can be plugged into a connector 
302 which is electrically coupled by a ribbon cable 304 
to the expansion connector 200. The expansion card 138 
is mounted in the subscriber terminal 40 by inserting it 
through a specially designed slot 304 of the terminal 1° 
cover 400. The slot, 304, as illustrated in FIGS. 12 and 
12A, is generally covered by an L-shaped snap on cover 
401 until the expansion card 1138 is to be inserted. The 
slot 304 is an opening molded into the subscriber termi- 
nal casing 400 which allows access to the inside of the 15 
subscriber terminal 40 through the cover. The slot 304 
has shoulder 406 which forms a step with a recess 404. 
Because of the secure nature of the subscriber terminal 
40, it is better to provide an expansion card 138 that can 
be inserted into an internal connector such as 302 with- 
out having to remove the terminal cover 400. Further, 
the slot 304 is made as narrow as possible for security 
and safety concerns. 

The expansion card 138 mounts in the subscriber ^ 
terminal 40 by sliding it into through the slot 304 in the 
side of the subscriber terminal cover 400 until it mates 
with connector 302. The slot 304 has mounted within a 
carrier 410 with guides which direct the expansion card 
138 toward the connector 302. As better seen in FIGS. ^ 
13A and 13B, the carrier 410 is a folded metal stamping 
which is attached by screws to the connector 302. The 
guides 4 12 are formed by stamping and bending parts of 
the carrier 410 inward to produce tabs for centering of 
the expansion card 138 in the slot 304. The carrier 410 35 
further has two tangs 380 which are stamped and bent 
up from its body. The tangs are at positioned at an 
incline so they catch door 364 just before its insertion 
into the connector 302. As the expansion card 138 is 
inserted further into the slot 304, the tangs 380 force the 
door 364 into its open position through a cutout in 386 
in the floor of carrier 410. 

The upraised grip 362 abuts the shoulder 406 of the 
slot 304 when the expansion card 138 is fully inserted as 
in seen in FIG. 12C. The shoulder 406 acts as a stop is 45 
to prevent excessive forces being applied and while 
inserting the card by providing positive feedback to the 
subscriber to indicate that a connection has been made. 
The grip 362 also provides visual clues to the subscriber 
because it is contoured to be flush with the subscriber 50 
terminal cover 400 when the expansion card 138 is cor- 
rectly inserted. The finger hold 402 on the shoulder 406 
between the grip 362 and the recess 304 encourages the 
subscriber to correctly position his hand when taking 
the expansion card 138 out By providing him a conve- 55 
nient finger hold 402 and grip 362, the subscriber gener- 
ally pulls the card straight out and toward him instead 
of up which could damage the connector 302 and card 
138. 

While there has been shown and described the pre- 60 
ferred embodiments of the invention, it will be evident 
to those skilled in the art that various modifications may 
be made thereto without departing from the spirit and 
scope of the invention as set forth in the appended 
claims. 65 

What is claimed is: 

1. A method of downloading program code to modify 
the control program of a subscriber terminal of a sub- 
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scription television system, said method comprising the 
steps of: 

providing a memory in the subscriber terminal; 

storing in said memory a boot code program opera- 
tive for downloading new program code for the 
control program of the subscriber terminal into 
said memory from a remote location, said control 
program operative for controlling predetermined 
features of the subscriber termina]; 

providing over one of a plurality of channels of said 
subscription television system a download program 
code parameters transaction to the subscriber ter- 
minal, said download program code parameters 
transaction including information identifying a 
selected one of said plurality of channels on which 
said new program code will be transmitted; 

activating said boot code program in response to a 
predetermined condition; 

said boot code program operative for tuning the sub- 
scriber terminal to said selected one of said plural- 
ity of channels; and 

storing said new program code in said memory. 

2. The method of claim 1, further comprising the step 
Of: 

providing a download program code parameters 
transaction to the subscriber terminal, said down- 
load program code parameters transaction includ- 
ing a destination in said memory for said new pro- 
gram code and a selected one of a plurality of chan- 
nels on which said new program code will be trans- 
mitted. 

3. The method of claim 2, wherein said new program 
code is transmitted in a plurality of download program 
code transactions, and wherein said download program 
code parameters transactions identifies the number of 
said plurality of download program code transactions 
that are to be received by the subscriber terminal. 

4. The method of claim 3, wherein said boot code 
program is operative for receiving download program 
code transactions and storing said new program code 
until all of said plurality of download program code 
transactions are received by the subscriber terminal. 

5. The method of claim 2, wherein said download 
program code parameters transaction is individually 
addressed to a particular subscriber terminal. 

6. The method of claim 2, wherein said download 
program code parameters transaction is addressed to a 
group of subscriber terminals. 

7. The method of claim 2, wherein said download 
program code parameters transaction is globally ad- 
dressed to all of the subscriber terminals in the subscrip- 
tion television system. 

8. The method of claim 2, wherein said new program 
code is globally transmitted. 

9. The method of claim 2, wherein said memory com- 
prises a first memory for storing said boot code program 
and a second memory for storing program code for the 
subscriber terminal. 

10. The method of claim 9, wherein said first memory 
is internal ROM of the subscriber terrninal. 

11. The method of claim 9, wherein said second mem- 
ory is at least one of RAM, EPROM, and FLASH 
EPROM memory. 

12. The method of claim 9, wherein said second mem- 
ory is FLASH EPROM and is divided into several 
pages. 

13. The method of claim 12, wherein said second 
memory has an internal portion and an external portion. 
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14. The method of claim 13, wherein said external 
portion of said second memory is provided by a plug-in 
expansion card. 

15. The method of claim 1, wherein said predeter- 
mined condition comprises initialization of the sub- 5 
scriber terminal. 

16. The method of claim 1, wherein said predeter- 
mined condition comprises detection of a failed mem- 
ory checksum test. 

17. The method of claim 1, wherein said predeter- 10 
mined features comprise on-screen parameters. 

18. The method of claim 1, wherein said predeter- 
mined features comprise subscriber interfaces. 

19. A reprogrammable subscriber terminal for a sub- 
scription television system which provides a plurality of 15 
information sources to the terminal, comprising: 

means for providing over one of said plurality of 
information sources a download program code 
parameters transaction, said download code pa- 
rameters transaction including information identi- 20 
fying a selected one of said plurality of information 
sources on which new program code will be trans- 
mitted; 

a processor for controlling said providing means, said 
processor including a first memory which stores a 
boot program and a memory bus defining a mem- 
ory space larger than said first memory; 

a second memory connected to said memory bus 
which is defined in said memory space for storing ^ 
said new program code for the control program of 
said processor, said control program operative for 
controlling predetermined features of the sub- 
scriber terminal; and 

said processor under regulation of said boot program 35 
operative for causing said providing means to 
download said new program code from said se- 
lected one of said plurality of information sources 
into said second memory. 

20. A reprogrammable subscriber terminal as set forth 
in claim 119, wherein said selecting means comprises: 

means for tuning to a television channel with down- 
loadable information inserted in the vertical blank- 
ing interval said television channel. 

21. A reprogrammable subscriber terminal as set forth 45 
in claim 29 wherein said selecting means comprises: 

means for tuning to a television channel with down- 
loadable information inserted on the audio carrier 
of said television channel. 

22. A reprogrammable subscriber terminal as set forth 50 
in claim 19 wherein: 

said processor is a microprocessor contained on an 
integrated circuit and said first memory is a read 
only memory internal to the integrated circuit. 

23. A reprogrammable subscriber terminal as set forth 55 
in claim 19 wherein: 

said second memory is at least one of RAM, 
EPROM, and FLASH EPROM memory. 

24. A reprogrammable subscriber terminal as set forth 

in claim 19 wherein: 60 
said second memory has at least a portion which is 
non-volatile. 

25. A reprogrammable subscriber terminal as set forth 
in claim 19 wherein: 

said second memory is downloaded with program 65 
code which controls said processor. 

26. A reprogrammable subscriber terminal as set forth 
in claim 19 wherein: 
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said second memory is Flash EPROM and is divided 
into several pages. 

27. A reprogrammable subscriber terminal as set forth 
in claim 26 wherein: 

said second memory has an internal portion and an 
external portion. 

28. A reprogrammable subscriber terminal as set forth 
in claim 27 wherein: 

said external portion of said second memory is pro- 
vided by plug-in card. 

29. The reprogrammable subscriber terminal of claim 
19, wherein said boot program is executed in response 
to a predetermined condition. 

30. The reprogrammable subscriber terminal of claim 
29, wherein said predetermined condition comprises 
initialization of the subscriber terminal. 

31. The method of claim 29, wherein said predeter- 
mined condition comprises detection of a failed mem- 
ory checksum test. 

32. The reprogrammable subscriber terminal of claim 
19, wherein said information sources comprise channels 
in the subscription television system. 

33. The method of claim 19, wherein said predeter- 
mined features comprise on-screen parameters. 

34. The method of claim 19, wherein said predeter- 
mined features comprise subscriber interfaces. 

35. In a subscription television system having a plu- 
rality of channels in which signals are transmitted to 
subscriber terminals, a method of downloading pro- 
gram code to modify the control program of a sub- 
scriber terminal, said method comprising the steps of: 

providing in the subscriber terminal a first memory 
and a second memory; 

storing in said first memory a boot code program 
operative for downloading new program code for 
the subscriber terminal into said second memory; 

activating said boot code program in response to a 
predetermined condition; 

providing over one of said plurality of channels a 
download program code parameters transaction to 
the subscriber terminal, said download program 
code parameters transaction including a destination 
in said second memory for said new program code 
and a selected one of said plurality of channels on 
which said new program code will be transmitted; 
and 

said boot code program operative for receiving said 
new program code in said selected one of said 
plurality of channels and storing said new program 
code in said second memory. 

36. The method of claim 35, wherein said new pro- 
gram code is transmitted in a plurality of download 
program code transactions, and wherein said download 
program code parameters transactions identifies the 
number of said plurality of download program code 
transactions that are to be received by the subscriber 
terminal. 

37. The method of claim 36, wherein said boot code 
program is operative for receiving download program 
code transactions and storing said new program code 
until all of said plurality of download program code 
transactions are received by the subscriber terminal. 

38. The method of claim 35, wherein said download 
program code parameters transaction is individually 
addressed to a particular subscriber terminal. 

39. The method of claim 35, wherein said download 
program code parameters transaction is addressed to a 
group of subscriber terminals. 
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40. The method of claim 35, wherein said download storing said new program code in said second 
program code parameters transaction is globally ad- memory. 

dressed to all of the subscriber terminals in the subscrip- 50 - The reprogrammable subscriber terminal of claim 

tion television system. 49 > wherein said new program code is transmitted from 

41. The method of claim 35, wherein said new pro- 5 head end » ■ P*™% «* download program code 
gram code is globally transmitted. transacts, and where.n sa.d download program code 
° ft. j / i • it t • -j — parameters transactions identifies the number of said 

42. The method of claim 35, wherem said first mem- v ~ f , , . . , A . . * . 

1 * r ^ I •,_ . . , plurality of download program code transactions that 

ory is internal ROM of the subscriber terminal. ^ e t0 be recdved by £ * bscri ber terminal. 

43. The method of claim 35, wherein said second {Q 51 ^ repr ogrammable subscriber terminal of claim 
memory is at least one of RAM, EPROM, and FLASH 50> wherein ^ boot code program is operative for 
EPROM memory. receiving download program code transactions and 

44. The method of claim 35, wherein said second storing said new program code until all of said plurality 
memory is FLASH EPROM and is divided into several of download program code transactions are received by 
pages. 15 the subscriber terminal. 

45. The method of claim 44, wherein said second 52. The reprogrammable subscriber terminal of claim 
memory has an internal portion and an external portion. 50, wherein said download program code parameters 

46. The method of claim 45, wherein said external transaction is individually addressed to a particular 
portion of said second memory is provided by a plug-in subscriber terminal. 

expansion card. 20 53. The reprogrammable subscriber terminal of claim 

47. The method of claim 35, wherein said predeter- 49 » wherein said download program code parameters 
mined condition comprises initialization of the sub- transaction is addressed to a group of subscriber termi- 
scriber terminal nals. 

48. The method of claim 35, wherein said predeter- „ J 54 " ™ e .^programmable ^subscriber terminal of claim 
, ... ' . r r -1 j 25 49, wherem said download program code parameters 

mined condition comprises detection of a failed mem- transaction is globally addressed* all of the subscriber 

ory checksum test. terminals in the subscription television system. 

49. A reprogrammable subscriber terminal for a sub- 55 ^ reprograiDIIiab i e subsC riber terminal of claim 
scription television system having a plurality of chan- 49 wne rein said new program code is globally transmit- 
nels in which signals are transmitted to subscriber termi- 30 te ^ 

nals, said reprogrammable subscriber terminal compris- The reprogrammable subscriber terminal of claim 

ing: 49, wherein said first memory is internal ROM of the 

a tuner for tuning to one of a plurality of channels; subscriber terminal 

a control microprocessor; 57. The reprogrammable subscriber terminal of claim 

a first memory and a second memory; and 35 49, wherein said second memory is at least one of RAM, 

a boot code program for said control microprocessor EPROM, and FLASH EPROM memory, 

stored in said first memory executed in response to 58 - The reprogrammable subscriber terminal of claim 

a predetermined condition, * 9 > wherein said second memory is FLASH EPROM 

said boot code program operative for: and * divided into several pages. 

receiving a download program code parameters 40 59. Tlie reprogrammable subscriber terminal of claim 

transaction over one of said plurality of chan- 58 wherein said second memory has an internal portion 

, . , , , . , A and an external portion, 

nels, said download program code parameters repro |_ble subscriber terminal of claim 

transaction including a destinanon m said second wherein ^ external portion of said second mem- 

memory for new program code and a selected 45 Qry fc ovided by ^ expansion card, 

one of said plurality of channels on which said 61 ^ reprogrammable subscriber terminal of claim 

new program code will be transmitted; ^ wrje rein said predetermined condition comprises 

tuning said tuner to said selected one of said plural- initialization of the subscriber terminal, 

ity of channels identified in said download pro- $2. The reprogrammable subscriber terminal of claim 

gram code parameters transaction; 50 49, wherem said predetermined condition comprises 

receiving said new program code in said selected detection of a failed memory checksum test 

one of said plurality of channels; and * * * 0 * 



55 



60 



65 



12/03/2001, EAST Version: 1.02.0008 



